CVE-2026-84934

CVE-2026-84934 affects the JCH Optimize WordPress plugin before 6.0.1 . The root cause is a missing capability check on an authenticated AJAX action that allows the request to select which internal action runs (specifically a getcacheinfo task override). This lets any authenticated user, includin...

CVE-2026-84934 JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override

The JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its authenticated AJAX actions and lets the request choose which internal action runs, allowing any authenticated users such as Subscribers to import arbitrary JCH Optimize WordPress plugin before 6.0.1...